This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft File: gSdW6ySj41K9bonR9aoISIlhpnQ.mft (raw, json) Hash identifier: OVgxzZECSg/8mAyHKkpZ7i5i80c7W5LT/j/G39DgHig= Subject key identifier: 98:C1:68:A1:01:F8:E3:2D:D5:AE:F7:3B:B1:45:F7:1A:BE:AD:A7:2E Authority key identifier: 81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74 Certificate issuer: /CN=812756eb24a3e352bd6e89d1f5aa08488961a674 Certificate serial: 019B34C549D0D87FC36EE05A0BA6327A30CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft Manifest number: 0A9B Signing time: Fri 19 Dec 2025 04:01:43 +0000 Manifest this update: Fri 19 Dec 2025 04:01:43 +0000 Manifest next update: Sat 20 Dec 2025 04:01:43 +0000 Files and hashes: 1: gSdW6ySj41K9bonR9aoISIlhpnQ.crl (hash: FLd9OhOIHRAvH/VAFAN0PsIzQPdJfDEONnZ6Ke+P3MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:49:d0:d8:7f:c3:6e:e0:5a:0b:a6:32:7a:30:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=812756eb24a3e352bd6e89d1f5aa08488961a674 Validity Not Before: Dec 19 04:01:43 2025 GMT Not After : Dec 20 04:01:43 2025 GMT Subject: CN=98c168a101f8e32dd5aef73bb145f71abeada72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:0f:73:88:f7:ad:68:4d:cd:48:a6:4d:b1: 63:a0:eb:5f:76:c9:54:3f:ab:13:25:31:ba:f7:68: d5:f3:d3:6c:31:f4:bf:15:55:9c:4c:b5:eb:5e:c7: ea:15:c8:64:0c:af:58:87:63:47:9b:cd:e2:b3:4f: d1:78:5c:ae:05:0f:c3:db:1b:d8:e3:6d:19:b2:4d: 2c:09:4f:28:ae:64:a5:c3:16:bc:36:2a:53:57:ac: 4d:3b:36:bd:4a:4a:4b:fb:88:e2:fb:1f:f4:5a:05: 23:d0:dd:fb:8c:0a:8b:54:2b:9d:6e:d6:17:53:c9: e2:ac:e7:74:66:82:6c:cb:7a:af:86:0f:ab:a7:62: 75:1e:d7:a1:41:ad:31:20:8d:45:a8:3c:92:c2:78: a3:66:64:0c:ae:39:a0:49:99:66:e8:46:8e:9a:b3: 4d:ee:bc:04:b6:62:bb:75:3d:1e:66:17:79:c9:56: db:36:44:f8:ec:3e:3b:6d:a5:76:5c:e8:05:11:f9: 01:c3:1d:58:15:b0:74:9d:31:f4:13:0a:1d:3d:cf: 56:aa:7e:95:b9:e4:01:0f:a1:80:2a:60:9f:f3:9e: 80:b5:be:05:46:07:c2:06:2b:14:a2:3b:c6:e2:b9: 12:37:34:97:0a:d4:2f:b1:d5:a0:3c:9c:61:05:53: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:68:A1:01:F8:E3:2D:D5:AE:F7:3B:B1:45:F7:1A:BE:AD:A7:2E X509v3 Authority Key Identifier: keyid:81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7d:74:f4:2a:e1:4d:6c:43:1c:ee:0a:2b:96:db:42:0f:b9: 75:bb:79:d8:0f:86:f3:7a:9e:f7:f4:83:75:00:7d:f9:5e:72: fa:09:ae:dc:23:e4:f2:e6:fd:d3:3c:44:ae:48:3a:17:c3:ff: c3:d5:43:5e:be:dd:99:df:f4:ea:c1:f5:08:31:db:e8:61:55: 02:8b:f4:71:df:7b:0c:b8:88:fc:b4:fd:98:d9:64:9f:de:43: 64:1c:1f:16:24:d6:31:c7:ff:61:44:fc:b2:75:b5:25:60:27: 51:a3:7a:ce:82:58:47:b8:c8:6d:d7:4a:10:ec:5a:9a:06:5f: fb:19:da:73:e4:70:ac:fa:f8:9b:94:23:7b:ac:e7:03:06:52: 32:9b:34:7a:d9:a6:f0:13:b3:40:32:4a:e0:83:73:9a:5c:b7: cc:de:35:46:4f:7f:79:f4:f8:4d:e6:f9:54:23:d3:33:84:64: 07:02:00:46:54:d8:0f:35:c2:2e:b8:11:06:87:53:56:57:8f: a4:5c:1a:63:fd:2e:a5:10:df:90:4b:ab:c9:d8:3a:51:2f:ea: 45:6d:63:07:70:49:b5:75:f1:e9:bb:97:f3:cb:68:b2:09:34: 73:8c:83:fd:6f:7b:c9:25:cf:0d:26:dd:bc:af:94:66:07:82: f4:ed:60:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUnQ2H/DbuBaC6YyejDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMjc1NmViMjRhM2UzNTJiZDZlODlkMWY1YWEwODQ4ODk2 MWE2NzQwHhcNMjUxMjE5MDQwMTQzWhcNMjUxMjIwMDQwMTQzWjAzMTEwLwYDVQQD Eyg5OGMxNjhhMTAxZjhlMzJkZDVhZWY3M2JiMTQ1ZjcxYWJlYWRhNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua8Pc4j3rWhNzUimTbFjoOtfdslU P6sTJTG692jV89NsMfS/FVWcTLXrXsfqFchkDK9Yh2NHm83is0/ReFyuBQ/D2xvY 420Zsk0sCU8ormSlwxa8NipTV6xNOza9SkpL+4ji+x/0WgUj0N37jAqLVCudbtYX U8nirOd0ZoJsy3qvhg+rp2J1HtehQa0xII1FqDySwnijZmQMrjmgSZlm6EaOmrNN 7rwEtmK7dT0eZhd5yVbbNkT47D47baV2XOgFEfkBwx1YFbB0nTH0EwodPc9Wqn6V ueQBD6GAKmCf856Atb4FRgfCBisUojvG4rkSNzSXCtQvsdWgPJxhBVP7wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjBaKEB+OMt1a73O7FF9xq+racuMB8GA1UdIwQY MBaAFIEnVusko+NSvW6J0fWqCEiJYaZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iYTY2MzQtZTkxNS00MDM2LWE5OTct NmQ1MjFiYzQ3NGY0LzEvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iYTY2MzQtZTkxNS00MDM2LWE5OTctNmQ1MjFiYzQ3NGY0 LzEvZ1NkVzZ5U2o0MUs5Ym9uUjlhb0lTSWxocG5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX109Crh TWxDHO4KK5bbQg+5dbt52A+G83qe9/SDdQB9+V5y+gmu3CPk8ub90zxErkg6F8P/ w9VDXr7dmd/06sH1CDHb6GFVAov0cd97DLiI/LT9mNlkn95DZBwfFiTWMcf/YUT8 snW1JWAnUaN6zoJYR7jIbddKEOxamgZf+xnac+RwrPr4m5Qje6znAwZSMps0etmm 8BOzQDJK4INzmly3zN41Rk9/efT4Teb5VCPTM4RkBwIARlTYDzXCLrgRBodTVleP pFwaY/0upRDfkEurydg6US/qRW1jB3BJtXXx6buX88tosgk0c4yD/W97ySXPDSbd vK+UZgeC9O1gyQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:38:14 2025 by rpki-client